In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix out-of-bound read in smb2_write
ksmbd_smb2_check_message doesn't validate hdr->NextCommand. If ->NextCommand is bigger than Offset + Length of smb2 write, It will allow oversized smb2 write length. It will cause OOB read in smb2_write.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2024 |
| Ubuntu | — | Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.2.0-1016-azureUpgrade linux-image-6.2.0-1016-azure-fdeUpgrade linux-image-5.15.0-1044-gcpUpgrade linux-image-5.15.0-1037-nvidia-lowlatencyUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-starfiveUpgrade linux-image-6.2.0-1015-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.2.0-1015-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1049-azureUpgrade linux-image-oem-20.04Upgrade linux-image-awsUpgrade linux-image-6.2.0-1009-starfiveUpgrade linux-image-5.15.0-1040-raspiUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-nvidia-6.2Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1037-nvidiaUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.2.0-1008-starfiveUpgrade linux-image-5.15.0-86-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-6.2.0-1016-raspiUpgrade linux-image-6.2.0-36-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1049-azure-fdeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-6.2.0-1016-lowlatency-64kUpgrade linux-image-5.15.0-86-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1047-awsUpgrade linux-image-6.2.0-36-generic-lpaeUpgrade linux-image-6.2.0-36-generic-64kUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-86-genericUpgrade linux-image-5.15.0-1044-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-86-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-86-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1044-kvmUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1030-gkeopUpgrade linux-image-6.2.0-1018-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1040-ibmUpgrade linux-image-6.2.0-1016-lowlatencyUpgrade linux-image-6.2.0-1016-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1045-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64k | Oct 6, 2023 | Oct 4, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub